Suggestions for blocklists!

Questions
22

They each have their own DNS?

23

Most of what I am using is based on Mullvads blocklists. I am also using Perflyst lists for TV and IoT devices and, the FMHY filter list.

Trying to find a balance of privacy and compatibility as I am not the only user on my network.

2 Likes
24

This is what I run in Adguard DNS. I rarely run into any problems that require white listing.

IMG_3925
IMG_39251179Ɨ2098 120 KB

5 Likes
25

I also forgot that I use that Smart TV list!

1 Like
29

I just use the ones recommended on the uBlock Origin wiki (I have it set to hard mode).

  • All of uBOā€™s own filter lists
  • EasyList
  • EasyPrivacy
  • Peter Loweā€™s Ad and tracking server list
  • Online Malicious URL Blocklist

I then also add the following to my rules:

* * 3p block
* * 3p-frame block
* * 3p-script block
* challenges.cloudflare.com * noop

However, that last bit does break a lot of modern sites.

1 Like
30

What do the 3p ones do?

1 Like
31

Fanboyā€™s Annoyance List
HaGeZiā€™s Threat Intelligence Feeds DNS Blocklist
HaGeZiā€™s Ultimate DNS Blocklist
Dandelion Sproutā€™s Anti-Malware List
Dandelion Sproutā€™s Anti-Malware List (Domains list version)
BadBlock+ (ABP)

32

They block 3rd-party content, 3rd-party frames, and 3rd-party scripts, respectively. The fourth rule unblocks Cloudflare CAPTCHAs.

1 Like
33

In Librewolf:

Built-in.

Ads - Easylist

Privacy - EasyPrivacy, Actually Legitimate URL Shortener Tool, AdGuard URL Tracking Protection

Malware protection, security - both

Peter Loweā€™s

Cookie Notices - all 4

Social widgets - none

Annoyances - Easylist Newsletter, Easylist Notifications.

Ironfox/UBO, for the most part, has the default lists. I think one of the BadBlock+ lists was giving me false positives so I turned it off.

34

At first, I suspected that ā€œBadBlock+ (ABP)ā€ was giving me false positives, too.

In another post, I saw someone mentioning a URL beginning with the following:
hxxps://www[.]neowin[.]net

I have visited Neowin for over twenty years and never thought anything about it.

ā€œBadBlock+ (ABP)ā€ blocked Neowin. I thought it was odd, but I then had Hybrid-Analysis scan Neowin:

What I saw meant that Neowin continued to be blocked, and ā€œBadBlock+ (ABP)ā€ was then seen in a more positive light.

1 Like
35

Thanks for this.

I just looked again and BadBlock+ list is active. I recently reinstalled Ironfox and didnā€™t disable that list this time around. Iā€™m going to leave it running. So far, I havenā€™t had a problem.

1 Like
36
1 Like
37

Excuse me, but isnā€™t using so many lists exposes attack surface e.g. malicious rules?

2 Likes
38

HaGeZiā€™s Milti Pro++, HaGeZiā€™s Threat Intelligence Feed, and ublock anoyances.

39

You raise an interesting point.

Is it more dangerous to risk malformed blocklists, or it more dangerous to operate a Web browser with reduced protection from known bad actors?

Yes, there could be trade offs.

40

I think itā€™s much better to enforce blacklists like Hageziā€™s at the DNS level. This way the entire network benefits, in particular the Ultimate blacklist will prevent Internet-of-Shit devices from calling home. But you can go further (as I do) and filter public DNS domains, the DNS over TLS port and known public DNS IPs to force devices on the network to use the local DNS server as much as possible.

That being said, I still use uBlock to strip out (empty) ad frames, other annoyances such pop-ups, and Youtube ads. I also use uMatrix and block all party content and scripts. (I believe this approach is now somewhat deprecated, and can be done within uBlock; I just like the uMatrix interface better.)

1 Like
41

Default ubo list, plus i enabled the 3 disabled annoyance filter and added the same i used on my adguardhome server:

  1. Hagezi multi normal.
  2. Hagezi threat intelligence feed.
  3. 1hosts lite.
  4. Oisd full.
  5. Fanboy ultimate.
  6. Hagezi referral whitelist.
2 Likes
42

Thanks, everyone! I prune a lot of smaller lists that no one was mentioning, and went for a stricter version of the HaGeZi I had.

Keep the recommendations coming if u have more!

1 Like
43

uBo hard mode with its default filter lists in addition to

  1. Legitimate url shortener tool
  2. Dan pollockā€™s host file, block outsider intrusion into lan, phishing url blocklist which are ootb in ubo.

Iā€™ll try lists from others with Rethink DNS. Opensnitch supports most lists too.

1 Like
44

they just block 3rd party content